Skip to content

FACT v1.2

Choose a tag to compare

View all tags
@IRB0T IRB0T released this 15 Sep 11:12
· 6 commits to main since this release
FACT-v1.2
0f3a5c9
This commit was created on GitHub.com and signed with GitHub鈥檚 verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

馃殌 FACT v1.2 Release: Powerful New Features for Incident Response and Digital Forensics
We鈥檙e excited to announce the release of FACT v1.2, packed with new capabilities to accelerate your workflow in both Incident Response and Digital Forensics. This update introduces the highly anticipated FACT Magic module, designed to streamline the correlation of findings across multiple artifacts and significantly improve your analysis speed.

馃攳 New Feature: FACT Magic Module
Correlating data from different sources can be a time-consuming task, but with the new FACT Magic module, you can now automate this process with ease. Here's a glimpse of what it can do:

Automated Artifact Correlation: Imagine spotting an RDP connection from a specific IP address (X.Y.Z.W) in event logs, followed by detecting a "Mimikatz" entry in the Master File Table, and finally discovering MIMIKATZ.EXE-.pf in the Prefetch. FACT Magic brings all these findings together automatically, helping you create a comprehensive timeline with a single click.

Faster, Focused Investigations: Just input a specific date range, and FACT Magic will quickly surface any suspicious or anomalous activity. This gives you a clear view of what鈥檚 happening during critical timeframes, whether you鈥檙e responding to a live incident or performing in-depth forensic analysis.

Enhanced Efficiency: By transforming labor-intensive, manual processes into automated workflows, FACT Magic saves you valuable time and effort, enabling faster decision-making and more accurate results.

馃洜 Improvements and Bug Fixes

  • General performance enhancements for smoother operation.
  • Minor bug fixes for improved stability.

How to utilize FACT:

Assets 3
Loading